Sanctum introduction

Sanctum is a small, experimental, fully privilege separated VPN daemon that transports encrypted network traffic between two peers. It uses a multi-process approach for fine-grained sandboxing, supports traffic encryption with AES256-GCM or Agelas, and uses shared symmetrical secrets for key exchange. The author wrote sanctum for personal privacy reasons and because they have experience building similar systems.